1
mirror of https://github.com/rapid7/metasploit-payloads synced 2025-03-24 18:16:24 +01:00

2616 Commits

Author SHA1 Message Date
OJ
4ffe127f04
Begin removing the delay-load dependency
The 'common' library has been removed. The only project that actually
used it was metsrv, so the code that metsrv required from common is now
directly compiled in as part of that project.

The common folder now contains files that are importanta cross all of
the projects, with a primary focus on the new "API" style function. What
this means is that MetSrv has an API that it exposes through a function
pointer that is passed to the extension when it's initialised. This
pointer references a structure with all the API functions wired in. This
means that:

* Extensions don't need to know anything about metsrv at compile time.
* The delay loading code can be removed, which was one of the last
  instances of "metsrv.dll" as a string.
* Metsrv.dll no longer exports any functions.

More to come.
2020-04-22 13:06:40 +10:00
OJ
1fb386c93b
Remove metcli and bare extension projects 2020-04-22 13:01:26 +10:00
Metasploit
4384ceffde Bump metasploit-payloads to 1.3.93 2020-04-21 20:21:00 -05:00
Jeffrey Martin
5b5c9c637d
Land , Toolset update to 141_xp with VS2019 v1.3.92 2020-04-21 20:12:40 -05:00
OJ
084eccdef1
Fix Rakefile to point to new output location
This PR contains changes that will force Meterpreter binaries to be
outputted to "output" instead of the "output/<arch>" folders. So the gem
generation needs to be updated as well so that this new location is used
when generating the gem.
2020-04-22 07:41:59 +10:00
OJ
fef2c54b91
Change README to point to existing Choco package for VS2013 2020-04-22 07:17:10 +10:00
OJ
fda53ff14b
Update readme to reference vsconfig files 2020-04-21 20:18:04 +10:00
OJ
429c5f4bd8
Add VS configurations to the source to make it easy to install tools 2020-04-21 19:57:57 +10:00
OJ
42e833c8fa
Update readme slightly 2020-04-21 19:24:23 +10:00
OJ
6df6bc9c56
Update install and build instructions in the README
This now shows how to install various VS versions correctly from
scratch.
2020-04-21 18:14:18 +10:00
OJ
5ab1d39776
Slight makefile tweak 2020-04-21 10:21:51 +10:00
OJ
23b7a7b9ad
Finalise support for building on all the toolsets. 2020-04-21 09:37:11 +10:00
OJ
f8154f8e04
Finalise support for VS2013/VS2017/VS2019 & v120_xp/v141_xp
These changes allow us to build across multiple toolsets and VS
versions.
2020-04-21 08:10:42 +10:00
Metasploit
107f532d8a Bump metasploit-payloads to 1.3.92 2020-04-17 13:13:40 -05:00
bwatters
a92c036011
Land , fix
Merge branch 'land-387' into upstream-master
v1.3.91
2020-04-17 12:50:02 -05:00
OJ
74c9c79892
Enable multie-CPU builds
Added /MP for parallel builds, and removed precompiled headers as /Yc
isn't compat with /MP.

Not enabled for the Powershell extension because of it's .NET-ness.
2020-04-16 15:30:17 +10:00
OJ
dbe13941c3
Update mimikatz code to avoid warnings 2020-04-16 11:06:59 +10:00
OJ
124a3a7c0c
Updated deps to include new LibreSSL stuff 2020-04-16 10:59:21 +10:00
OJ
f27e09e85f
Update deps, remove unused folder 2020-04-15 14:32:01 +10:00
OJ
8f5d4bef01
Replace OpenSSL with LibreSSL in the Python extension
This was a bit of a pain, but was well worth it. Had to add a couple of
hacks to make it all work, but this is a nicer solution than having to
depend on OpenSSL and its horrendous build experience.
2020-04-15 13:43:50 +10:00
OJ
306e2f9399
Update the bare template 2020-04-14 20:13:02 +10:00
OJ
3809651b79
Fix a slight issue with the old Mimikatz extension 2020-04-14 14:42:10 +10:00
OJ
ef721b1f3c
Update make file and dependencies 2020-04-14 14:24:30 +10:00
OJ
1aea69806a
Update sniffer SDK libs 2020-04-14 14:09:12 +10:00
OJ
078a3e960f
Finalise 'Release' build for both x86 and x64 _clean_
Still need to fix dependencies and whatnot as well.
2020-04-14 13:18:25 +10:00
OJ
1a6bb89845
Update to build against new libs, remove hacks to make things work 2020-04-14 12:40:02 +10:00
OJ
443bfca952
Update JPEG lib to build with VS2019 toolset 141_xp 2020-04-14 12:29:59 +10:00
OJ
712268fab7
Get Python extension building clean
Warnings as errors, builds clean. Had to do some horrible hacks:
1) Include custom implementation of a lib function just so we could
   link against stuff built with older VS.
2) Include legacy symbols for old io for the same reason.
2020-04-14 12:13:30 +10:00
OJ
100ffd6d5b
First round of VS2019 changes 2020-04-14 10:28:08 +10:00
Tim W
9d343c9f62 simplify ProcessChannel read 2020-04-12 14:12:12 +08:00
Tim W
d4c808d413 fix 2020-04-11 14:33:52 +08:00
Metasploit
39f6fd7849 Bump metasploit-payloads to 1.3.91 2020-04-08 06:14:33 -05:00
Brent Cook
2e9943af8d
Land , enhance Windows extapi support for window enumeration
Merge remote-tracking branch 'upstream/pr/385' into upstream-master
v1.3.90
2020-04-08 06:04:41 -05:00
Metasploit
2e2aac23d1 Bump metasploit-payloads to 1.3.90 2020-04-08 04:19:53 -05:00
Brent Cook
a27f7c0388
Land , fix wildcard handling in Java meterpreter v1.3.89 2020-04-08 04:10:13 -05:00
Metasploit
bde0eef1f8 Bump metasploit-payloads to 1.3.89 2020-04-07 17:26:09 -05:00
Brent Cook
49b117838a
Land , don't modify stageless config block in place v1.3.88 2020-04-07 17:15:33 -05:00
Brent Cook
bf8950ebe9 remove unneeded checks before free, one being an impossible scenario 2020-04-07 17:15:03 -05:00
Brent Cook
dbac98fed7
Land , check if context is null before applying wakelock 2020-04-07 17:06:19 -05:00
cn-kali-team
6d7740cc72 Process Unicode support 2020-04-05 11:53:22 +08:00
cn-kali-team
451a094269 Process Unicode support 2020-04-05 11:53:16 +08:00
cn-kali-team
25f770dcb3 Process Unicode support 2020-04-05 11:53:06 +08:00
cn-kali-team
a8df9b3604 Process Unicode support 2020-04-05 11:52:08 +08:00
Metasploit
3153421312 Bump metasploit-payloads to 1.3.88 2020-04-02 08:47:42 -05:00
bwatters
903620268f
Land , Reducing permissions requested for sys_steal_token
Merge branch 'land-377' into upstream-master
v1.3.87
2020-04-02 08:37:42 -05:00
cn-kali-team
348aa69f68 Add window class name filter,Unicode Support etc. 2020-03-27 22:12:37 +08:00
cn-kali-team
443b6f2f23 add window class name filter 2020-03-27 22:12:04 +08:00
OJ
8b4d65de47
Fix stageless config block memory protection
I found an edge case where stageless payloads did not work when they
were embedded in .NET applications. The reason for this is because the
configuration block is stored alongside the code in stageless payloads
and hence is loaded into memory as part of the section when it's mapped.
This section, in native world, remains RWX, and hence we don't have a
problem reading from and writing to it. We write to it for various
reasons, such as when the session guid changes.

In .NET land, this section is mapped as RX instead of RWX. This means
that when we try to write to it, the program segfaults due to an access
violation.

This code modifies the loading of the configuration so that instead of
maintaining a pointer to the original configuration, it instead creates
a copy of it on the heap. I preferred this fix over marking the memory
as RWX, which obviously stands out a bit more.
2020-03-17 13:15:31 +10:00
Tim W
0ca5722ab1 fix wildcard usage 2020-03-10 14:59:24 +08:00
Tim W
312e019b58 revert globbing and only fix basic wildcard usage 2020-03-09 14:25:53 +08:00